Browse CVEs

CRITICAL 9.1 CVE-2026-55471 HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.10, org.hl7.fhir.utilities.Xslt… Hl7 Fhir Core 6.9.10+ Fix from $2,3002026-07-08 HIGH 7.5 CVE-2026-55470 HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.10, the fix for CVE-2026-45367 … Hl7 Fhir Core 6.9.10+ Fix from $1,9502026-07-08 CRITICAL 9.3 CVE-2026-34361 HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.4, the FHIR Validator H… Hl7 Fhir Core 6.9.4+ Fix from $2,3002026-03-31 MEDIUM 5.8 CVE-2026-34360 HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.4, the /loadIG HTTP end… Hl7 Fhir Core 6.9.4+ Fix from $1,6002026-03-31 CRITICAL 9.1 CVE-2026-34359 HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.4, ManagedWebAccessUtil… Hl7 Fhir Core 6.9.4+ Fix from $2,3002026-03-31 HIGH 7.5 CVE-2023-28465 The package-decompression feature in HL7 (Health Level 7) FHIR Core Libraries before 5.6.106 allows attackers to copy arbitrary files to certain dire… Hl7 Fhir Core 5.6.106+ Fix from $1,9502023-12-12 HIGH 8.1 CVE-2023-24057 HL7 (Health Level 7) FHIR Core Libraries before 5.6.92 allow attackers to extract files into arbitrary directories via directory traversal from a cra… Hl7 Fhir Core 1.2.30 / 5.6.92+ Fix from $1,9502023-01-26 MEDIUM 6.1 CVE-2020-24301 Users of the HAPI FHIR Testpage Overlay 5.0.0 and below can use a specially crafted URL to exploit an XSS vulnerability in this module, allowing arbi… Testpage Overlay after 5.0.0 Fix from $1,6002020-10-08